Privacy policy

Last updated 23 October 2026

This notice explains how we process the personal data of people who visit this website, ask for information or book a stay at La Capanna di Arturo, in accordance with Articles 13 and 14 of Regulation (EU) 2016/679 (GDPR) and the Italian Data Protection Code (Legislative Decree 196/2003).

Data controller

The data controller is Mauro Menichetti, Corte Cecchini, 55012 San Ginese di Compito, Capannori (LU). For any question about your data, or to exercise your rights, write to mauro.menichetti.lu@gmail.com or call +39 3357618592.

What data we process

  • Browsing data. IP address, browser and device type, pages visited, date and time, referring website. They are collected automatically by the systems that run the website.
  • Data you send us. Name, phone number, email and message content, when you write to us on WhatsApp, by email or call us. The enquiry form on the website opens WhatsApp or your email app and does not store any data on the website.
  • Booking data. Name, contact details, dates of stay, number of guests and payment details, when you book with the booking module on the website. The module is provided by Holidu, which handles booking and payment. We do not see or store your card details.
  • Data required by law during your stay. Personal and identity document details of each guest, to be reported to the police (Questura), and the data needed for the tourist tax and tourism statistics.
  • Data collected with cookies and similar tools. Only with your consent, except technical ones. Details are in the Cookie policy.
  • Record of cookie choices. When you choose in the banner, the website records an anonymous code generated by your browser, date and time, the categories chosen, the language, the page and the version of the cookie policy. It does not record your IP address or any other data that identifies you.

Why we process it and on what legal basis

  • To answer your requests for information and availability (pre-contractual steps taken at your request, Art. 6(1)(b) GDPR).
  • To manage your booking and stay, including arrival, assistance and communications during your stay (performance of a contract, Art. 6(1)(b) GDPR).
  • To comply with legal obligations, such as reporting guests to the police under Article 109 of the Italian Consolidated Law on Public Security, the tourist tax of the Comune di Capannori, tax obligations and statistical surveys (legal obligation, Art. 6(1)(c) GDPR).
  • To keep the website secure and working and to protect our rights in case of disputes (legitimate interest, Art. 6(1)(f) GDPR).
  • To demonstrate the cookie choices made (legal obligation, Art. 6(1)(c) and Art. 7(1) GDPR).
  • To understand, in statistical form, how the website is used, with Google Analytics and Microsoft Clarity, in order to improve it (consent, Art. 6(1)(a) GDPR and Art. 122 of the Italian Data Protection Code).
  • To measure the results of our campaigns and show relevant ads on Google and on Meta platforms (Facebook and Instagram), including to people who have already visited the website (consent, Art. 6(1)(a) GDPR and Art. 122 of the Italian Data Protection Code).

You can withdraw your consent at any time from the "Cookie preferences" link at the bottom of every page. Withdrawing has no effect on your use of the website or on anything done before.

Do you have to provide your data?

To answer requests and manage bookings we need your contact and stay details, without which we cannot proceed. Data required by law are mandatory to stay at the property. Consent to statistics and advertising is optional.

How we process data

With electronic and, where needed, paper tools, using appropriate security measures. We do not make decisions based solely on automated processing that have legal effects on you.

Who we may share it with

Only for the purposes above, data may be shared with

  • Automattic (WordPress.com), which hosts the website and collects aggregate statistics on visits and page performance.
  • Holidu GmbH and Holidu Hosts GmbH, Munich (Germany), which provide the booking module and handle bookings, payments and support. For the data entered in the module, Holidu's privacy policy also applies.
  • Google Ireland Limited (Google Analytics, Google Ads, Google Maps), Microsoft Ireland Operations Limited (Microsoft Clarity) and Meta Platforms Ireland Limited (Meta pixel), only with your consent.
  • WhatsApp Ireland Limited, if you choose to write to us on WhatsApp.
  • Advisers and our accountant, for administrative and tax obligations.
  • Public authorities, such as the police, the Comune di Capannori and the Italian Revenue Agency, where required by law.

If you book on Booking.com, Airbnb, Vrbo, Expedia or Holidu through the links on the website, your data are processed by those platforms as independent controllers, under their own privacy policies.

Providers that process data on our behalf act as processors (Art. 28 GDPR) or as independent controllers, depending on their role. For the collection of data with the Meta pixel we are joint controllers with Meta Platforms Ireland Limited, as set out in its controller addendum. Data are never published or sold.

Transfers outside the European Union

Some providers (Google, Microsoft, Meta and Automattic) may transfer data to the United States. Transfers are based on the European Commission's adequacy decision of 10 July 2023 (EU-US Data Privacy Framework), for certified companies, and on the standard contractual clauses approved by the Commission.

How long we keep data

  • Enquiries that do not lead to a booking, up to 24 months from the last contact.
  • Booking data and tax documents, 10 years, as required by Italian civil and tax law.
  • Data for the police and the tourist tax, for the time required by the relevant rules.
  • Statistical data, no longer than 14 months in the analytics tools.
  • Advertising data, for the cookie durations listed in the Cookie policy. Providers keep them under their own policies.
  • Record of cookie choices, 24 months from recording, then deleted automatically.
  • Technical browsing data, for the time needed to keep the website secure.

Your rights

You can ask at any time to access, correct or delete your data, restrict its processing, receive it in a readable format and object to processing based on legitimate interest (Articles 15-22 GDPR). You can also withdraw your consent. Just write to mauro.menichetti.lu@gmail.com and we will reply within one month. To see or delete your cookie choices, quote the code shown in "Cookie preferences".

If you believe the processing breaches the law, you can lodge a complaint with the Italian Data Protection Authority (garanteprivacy.it) or with the authority of the EU country where you live.

Changes

This notice may be updated, for example if the tools used by the website change. The date at the top shows the latest version.